Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235312e302f32342d3234203d3e203238323532.roa
File:                     3137392e3138392e3235312e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          4+PSR3/NlVMnNkvhuazrYj2/cJKMnt/V82WnJJ/6YPE=
Subject key identifier:   55:CB:85:A2:32:A2:2A:48:D1:5A:3C:08:4F:A7:CE:5E:9A:6C:77:8F
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       74B57D43DECC7B2FCDADB6DB848D44597851B99B
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235312e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:21 +0000
ROA not before:           Wed 09 Apr 2025 18:43:21 +0000
ROA not after:            Wed 08 Apr 2026 18:48:21 +0000
asID:                     28252
IP address blocks:        179.189.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b5:7d:43:de:cc:7b:2f:cd:ad:b6:db:84:8d:44:59:78:51:b9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:21 2025 GMT
            Not After : Apr  8 18:48:21 2026 GMT
        Subject: CN=55CB85A232A22A48D15A3C084FA7CE5E9A6C778F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:41:77:51:90:74:e3:cf:fe:e6:f9:4b:6e:4d:
                    29:ca:1c:c5:54:8b:d4:80:07:8a:1b:fb:6c:fa:35:
                    89:89:63:60:20:60:b4:41:68:fa:64:22:44:d4:37:
                    f9:f3:1e:df:08:c6:7f:b0:74:39:bf:6a:4c:b2:40:
                    20:f8:f9:70:ff:a5:ca:38:16:76:08:b5:b4:1e:e3:
                    be:45:a4:1c:56:a9:96:d6:1d:4b:3f:4f:6b:71:ae:
                    e9:af:fb:8e:f2:79:e8:d0:7d:1b:7a:f1:9c:7d:95:
                    5a:73:ba:85:d7:62:c0:95:46:c1:db:e6:0b:7a:15:
                    0a:c2:87:02:1d:40:bd:5e:25:0e:aa:01:fd:c5:bc:
                    80:dc:19:51:69:e7:b9:72:13:ab:33:d6:86:de:e7:
                    b0:58:15:73:b2:f9:4f:44:bd:90:40:48:8b:cc:af:
                    d1:b3:a7:94:6b:ab:de:f9:e7:37:54:bf:e1:38:72:
                    56:67:40:a6:b3:bd:07:4b:e6:9a:2c:17:c8:7a:4d:
                    80:76:46:9c:4e:1d:32:2a:d1:d5:65:ad:9e:be:41:
                    cf:37:e1:5e:e7:11:8c:63:d3:26:01:f1:5b:cc:a0:
                    e8:3b:c6:43:30:5c:e7:1f:49:00:30:03:2f:20:ef:
                    e2:b3:0b:09:53:75:42:08:cb:93:24:c3:fd:86:9b:
                    e4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CB:85:A2:32:A2:2A:48:D1:5A:3C:08:4F:A7:CE:5E:9A:6C:77:8F
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235312e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:81:cd:87:d3:c6:47:7a:46:a7:c5:eb:61:ac:07:59:e1:03:
         fb:f8:e9:5d:96:02:87:c3:b0:1c:71:28:1c:ac:60:71:00:19:
         33:80:49:38:33:61:4e:19:02:aa:ca:4b:c5:a2:67:62:ca:00:
         25:21:82:a1:c7:ed:19:d4:6e:ec:fb:7c:e9:b2:57:f2:29:a6:
         c4:b8:56:0e:9a:39:be:f3:c0:67:62:55:c8:a3:a6:34:c3:9d:
         0d:ba:ed:e1:ba:11:5b:20:c7:fb:47:9e:38:63:c8:68:e6:cb:
         d4:cc:b5:b3:47:dd:a2:50:d8:d1:03:88:3f:eb:f4:9a:91:e0:
         ac:dc:87:50:1e:41:0d:63:aa:37:53:68:0a:40:fc:13:41:b0:
         8b:f3:8e:92:52:b6:18:8c:a2:9c:60:00:78:3a:60:3a:30:76:
         78:8f:71:7c:b9:cb:30:5c:0e:84:b9:68:3b:7f:66:68:e5:ec:
         15:8e:21:b9:28:ff:cf:50:1b:db:ae:70:eb:0e:87:24:10:8f:
         a0:45:cf:26:3b:a4:d8:e0:c9:f8:25:4c:4f:b6:11:ed:2c:72:
         6e:e0:de:b0:aa:e9:d7:58:4e:1b:eb:03:ad:6f:c6:e3:5d:04:
         5f:b3:c5:65:98:3f:cf:93:2b:55:f8:18:56:9c:ab:c8:eb:33:
         6b:be:3c:8d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdLV9Q97Mey/NrbbbhI1EWXhRuZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD
M0RDQUIzNDAeFw0yNTA0MDkxODQzMjFaFw0yNjA0MDgxODQ4MjFaMDMxMTAvBgNV
BAMTKDU1Q0I4NUEyMzJBMjJBNDhEMTVBM0MwODRGQTdDRTVFOUE2Qzc3OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPQXdRkHTjz/7m+UtuTSnKHMVU
i9SAB4ob+2z6NYmJY2AgYLRBaPpkIkTUN/nzHt8Ixn+wdDm/akyyQCD4+XD/pco4
FnYItbQe475FpBxWqZbWHUs/T2txrumv+47yeejQfRt68Zx9lVpzuoXXYsCVRsHb
5gt6FQrChwIdQL1eJQ6qAf3FvIDcGVFp57lyE6sz1obe57BYFXOy+U9EvZBASIvM
r9Gzp5Rrq9755zdUv+E4clZnQKazvQdL5posF8h6TYB2RpxOHTIq0dVlrZ6+Qc83
4V7nEYxj0yYB8VvMoOg7xkMwXOcfSQAwAy8g7+KzCwlTdUIIy5Mkw/2Gm+RfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVcuFojKiKkjRWjwIT6fOXppsd48wHwYDVR0j
BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC
MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzEzNzM5MmUzMTM4MzkyZTMyMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzvfswDQYJKoZIhvcNAQELBQADggEBACmBzYfT
xkd6RqfF62GsB1nhA/v46V2WAofDsBxxKBysYHEAGTOASTgzYU4ZAqrKS8WiZ2LK
ACUhgqHH7RnUbuz7fOmyV/IppsS4Vg6aOb7zwGdiVcijpjTDnQ267eG6EVsgx/tH
njhjyGjmy9TMtbNH3aJQ2NEDiD/r9JqR4Kzch1AeQQ1jqjdTaApA/BNBsIvzjpJS
thiMopxgAHg6YDowdniPcXy5yzBcDoS5aDt/Zmjl7BWOIbko/89QG9uucOsOhyQQ
j6BFzyY7pNjgyfglTE+2Ee0scm7g3rCq6ddYThvrA61vxuNdBF+zxWWYP8+TK1X4
GFacq8jrM2u+PI0=
-----END CERTIFICATE-----
Generated at Fri May 2 13:52:18 2025 by rpki-client